{"report_id":"79c8a9e8-7b3b-4e19-a082-64d496730b9f","version":0,"status":"done","tags":[],"date":"2026-06-26T23:42:01Z","url":{"schema":"https","addr":"ushib.top/ARB/?claim.arbitrum.io","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"172.67.197.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"ushib.top/ARB/?claim.arbitrum.io","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"title":"Arbitrum Airdrop","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T05:24:27.754443Z","times_seen":17773657,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"ushib.top/ARB/?claim.arbitrum.io","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"172.67.197.146","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-31T23:42:01Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"ushib.top","ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-05-26","domain_rank":0,"first_seen":"2026-06-26T23:37:34.07344Z","last_seen":"2026-06-26T23:37:34.07344Z","alert_count":44,"request_count":22,"received_data":4053153,"sent_data":11247,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"eoe1u9eng3oo7bi.m.pipedream.net","ip":{"addr":"18.205.101.32","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"domain_registered":"2015-11-25","domain_rank":0,"first_seen":"2025-08-21T04:25:57.661405Z","last_seen":"2026-06-26T23:37:41.211915Z","alert_count":0,"request_count":1,"received_data":248,"sent_data":538,"comment":"","tags":null,"fingerprints":null},{"fqdn":"vsb26.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":1386510,"first_seen":"2020-04-05T00:48:29Z","last_seen":"2026-06-20T22:28:30.985283Z","alert_count":0,"request_count":1,"received_data":417,"sent_data":1099,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-06-22T13:54:44.942655Z","alert_count":0,"request_count":21,"received_data":1139942,"sent_data":10074,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-06-22T14:20:58.339256Z","alert_count":0,"request_count":3,"received_data":5186,"sent_data":1656,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ushib.top/ARB/?claim.arbitrum.io","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"572cb94037fffc2a0a53b465972e15f1","sha1":"0d679b041a7c1ca45cc99e2d229fc2b86762838d","sha256":"6487e4bdd0f51bbfd9105810a41755847fdae2c274e2fc325cd22356d7707e35","sha512":"f7c4db7986d362b58ff4b4646cdeb71992c0ce28949773c4471915f2cc8828329445777e228ef248f508f721a33dfea3d5694bc7ec18dc6c00134ee23155ff32","ssdeep":"","tlshash":"e3800455714110004f57115050171c444030007155407cc011c0d4710d51030110545c","size":34,"data":"","first_seen":"2023-04-11T21:16:40Z","last_seen":"2026-08-08T05:04:00.719606Z","times_seen":91423,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d12d15160f2605cf70660e7166c6b2d3","sha1":"814c1aef9862e912b99376a5c766978b903144be","sha256":"2d90899a293947e63e242b0bbb91c4a971428bf09de4cb7abc48bd9147b1fdf6","sha512":"7a419016b85449813fa23f80a7cf776dbba51f2d5798f4eeafb2a2b363479d26f9c4147ac612e9a5f84b495712ab29b2deaff4d098a0f6ede948b46912ffa0d5","ssdeep":"3072:tiEIYgAYqhzhTodyWFW1WfifM4AOMMxzjQi4IzxLMz9YZ15:t6yWFW1WKfM4AAxvZLMz9615","tlshash":"5a34c69df186b47606a37130501f320af23a685ab45ac4d4f636d8e1bd789cea133f79","size":241359,"data":"","first_seen":"2026-06-24T02:52:14.792867Z","last_seen":"2026-07-02T05:16:55.618666Z","times_seen":1132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","size":5504,"data":"","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-08T05:18:54.128197Z","times_seen":42030,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/?claim.arbitrum.io","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"3433c9d3e9b7e8e5b34ed72e309db572","sha1":"d53d7df082088749c1df6b08330ee9b9e4076932","sha256":"1d96fa9904e3743570bccd5be90e83fd91975299f374093cc6f723673d582dd1","sha512":"ffd0e047331871f21738643968b7eb7fa045ee0e45346a9ea986c4b8a3e745dd310542c6b2734f6d244408bba6548ec66f5cd7662c69485b5e59e3b9432cdff2","ssdeep":"","tlshash":"06f04245bd825a24d35670ddc41f978cc53690dd91491c4cbb64ece1de94c2cdfc6534","size":585,"data":"","first_seen":"2025-08-01T04:16:24.219641Z","last_seen":"2026-08-08T00:54:07.909723Z","times_seen":3486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/?claim.arbitrum.io","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"1e21743cd2ee2004cd56bfc5c29e3609","sha1":"bf516634ffbcfd3186b71dafc0ecdcc47894c439","sha256":"0e428980439e794b176e0ee3cd84e4878510b1d52c1efc1c00f4af9729a17029","sha512":"4264e5ce5b4f3acb24046582388132a5915398c9266c18c6349d75fb94bd74bac990dc6ebd12e1e118a3a24752a3e4badae2faabd69b9827d1f223a0750da4c2","ssdeep":"48:atoyTqSsM+c69M+c69M+c69M+c60778KK7NaaM//M+A:atlDNDNDNDl778KKw//M+A","tlshash":"25913f32165427da63ce8fd45a85751d01d2c89a383e60bdff3279eded3a683c031612","size":4506,"data":"","first_seen":"2025-08-01T04:16:24.215618Z","last_seen":"2026-08-08T00:54:07.910218Z","times_seen":3401,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c529786800a1b7e92a493a07bb8f11a6","sha1":"2b7cd1b06bd155ee698d95fd0e06f269ba37709e","sha256":"80c50c48d8ebe37367af574d48fdac278f7bf3bac97dabd5f977ed693b53a58f","sha512":"39e1b570a4fda9b8452ea58d01049b1e2a7a366c2ade583ba9369fda2306dd3ecf994a727394fc917b23cce5d54f3c4e51acb468c35c6911f0d007a631fe30ba","ssdeep":"1536:BigMXSFu196wofTn32jlDlgaOA9WbaGlDluK14VYrdZPkx3u4V5pfYMrlSf:4DiuTg+Glmfx3u4V5pPrlSf","tlshash":"f6a31a6ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","size":106684,"data":"","first_seen":"2026-06-24T03:40:21.679494Z","last_seen":"2026-07-02T05:16:55.666316Z","times_seen":887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/js/main.js","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4c4084869eed0d98e9107a7a959ee87e","sha1":"fecc8e8218e7d97d0b52044181009e0ace7d7110","sha256":"321bcdb4b75c884e7f3454433492b4ad86af3925a477882ccb6bd55fd31486cc","sha512":"342b479a4ed7e38457d88e89385c2b3c49d6dd851378b9afad792861a4080b8ce5e7b44509dcbf95bfd40115d67b2c52601c943bcd08f85fc32d876de267e15a","ssdeep":"96:/2SPlSOG9BK3i9UCH24axF/CtNQdmbt6yKVpgDr2Wgxta/6:/27OBi9UY24axF/CtES6yKVGDr2txtu6","tlshash":"f79125062fd02bc9534922ed372bb468e331e998c1c1518ec89d7d649bd1f38dafa538","size":4477,"data":"","first_seen":"2026-03-10T21:43:01.080835Z","last_seen":"2026-06-26T23:42:12.190264Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-08T05:18:54.106432Z","times_seen":92939,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/?claim.arbitrum.io","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"e0cc0affdfd97c841047ad37e12a2e18","sha1":"878330c47ce526a33d16615a71f8a6f62e6c3cb1","sha256":"08676ff98766af994da6ba2e8a8ce633686be7b8564ddfa00b69dd9b5a2b08d6","sha512":"edb95c2de62fa2d812ba7c7baa8210bb8aaf50fb78d3a2cd625d35232d3b02835f5a87d9fd8456825cbf4268d30a9625cc3889c38b3582ee30dfd43f15f33d46","ssdeep":"49152:rGkwdNZngkO5QewW2QUSvhjG+EyY4bfO3xrQanJfCpszVtIo7:a","tlshash":"73f523926d5b78f68f54439570ab2d0f18980d22585de1daf7a4f5c23caef9080ef92c","size":3392152,"data":"","first_seen":"2026-06-26T23:37:43.293286Z","last_seen":"2026-06-26T23:42:12.191375Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/?claim.arbitrum.io","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"2380d391cf784bce2f77e0e16fa2268b","sha1":"2b88cb08e3d7f56772d46fe1a10d84774e8728d5","sha256":"e65fcff70fe965f3d1878fe515a7ebcd265dfe61b15461521450c882e8d081d7","sha512":"0f3264af3a045928be20d2ee1ef3af905571d07e3fc25eaeda22199baca89b8c9bff94d90d81124ff45b16c5e40df291c2f49d9464ba901d2d961f6fd1196f1f","ssdeep":"","tlshash":"e6411b1e00aa0aa31ba3054333ce846d0956c2cedcc73534d3b27f8134c67832a93bea","size":2254,"data":"","first_seen":"2025-08-01T04:17:54.882582Z","last_seen":"2026-08-08T00:54:07.91843Z","times_seen":3270,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/68469777501b8d1909142b40/1it9rvbbn","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f651b78676ac7b48a56af76d17cd536","sha1":"f985032a9f938e93149b808b7c58ecddc6ea9021","sha256":"88a6a8ed351829a0891db3704e9cdb3d908ad9791bd6634432cf5228bbdd6b1e","sha512":"9cc2ab6ca517bf1e065ca63e6a8b9447fc48f3bdbf4926245b235e99514259a913af2923ffdcf78e395f7e5297434a0c943dcc08570e0b3b1041a7807a1be0d7","ssdeep":"","tlshash":"894154d79f0f1d52a32420d94caefd0f78b371f646d869924b48102276b17ad2acde38","size":2123,"data":"","first_seen":"2026-06-26T23:37:43.229623Z","last_seen":"2026-06-26T23:42:12.177865Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/?claim.arbitrum.io","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"59a13eef9e5e0ec7844e58e8b47d54a0","sha1":"0fb2b2059a878b87f8524284d448dd46a4351953","sha256":"c890c150b008d069bfddb86ee2c2e3fe979515939053b4c53fd6853b68e4fe35","sha512":"7fcdb614d30b1141e9a1e134a98e2888007f786f866c24e6383106d3e003f094e72901aa295e7d3450fccf5a249b25b436401a5b9439205da6b0eec8d72cfc80","ssdeep":"","tlshash":"33f0beaf336126ca23ae6ad20796c01d1e72e4ab3002163c575a36ca0cb6f52521b07e","size":494,"data":"","first_seen":"2025-08-01T04:17:54.874483Z","last_seen":"2026-08-08T00:54:07.912416Z","times_seen":3232,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e03e2e8123414a9b75d420e2eada7fc9","sha1":"43192f3233e07d96140f95880261f027bc0b13e6","sha256":"34f98e3742d4fb8141269e79a7ba8e245a078c4cc8123477c769aaa7be865176","sha512":"3f6cb179bdab1cba09adfb8ec9aefb213992678c18b8acac01cb4021fe7684cc56fdd472f805061b6acba33e6f555bd6ccce6cc407b5d2be29d28054113a1f78","ssdeep":"384:UJw/U5YK8Hx9KJcThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJcThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"c652c6a7b2a4782d42379712708f3205f33b7d45b215da19f36edcea4aa84c16056f3e","size":14213,"data":"","first_seen":"2026-06-24T03:40:21.647965Z","last_seen":"2026-07-02T05:16:55.645623Z","times_seen":816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","size":1000,"data":"","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-08T05:18:54.129088Z","times_seen":49630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-08T05:18:54.131432Z","times_seen":66440,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96ef13965221ca05025839273ae465da","sha1":"6241fa7d32f0ec4bbf6e4f19ee9de157c0a19f80","sha256":"0d4bddd3c2a0340eaba00d621f4e6c8484b1c4ca78f56976c1dea0b59720a21d","sha512":"8a1b2e7be0128eed522e85ab752bda824ae9077d5939d5bef272da7a417087c56c85b1ede37df4e251c3745e5fd66275923949ea2cc889cabdb056783b0e1f1b","ssdeep":"96:zNC9Hqt7pEma7hY/rcKqJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYILRIvgx43nVY","tlshash":"fcb1859ef247b456c156225150ef3b1df33a281ca61ccdc4b66565f218784cba077b39","size":5261,"data":"","first_seen":"2026-06-24T03:40:21.597078Z","last_seen":"2026-07-02T05:16:55.594124Z","times_seen":898,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/0x.js","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7d4acd04b840bc06246022c4aedeb33c","sha1":"c47c07af75ef1b63be422071799113cb7d484544","sha256":"66688abfe36b64a65debbbd0403af3020052d4c66318a58cb5b025149bac7de0","sha512":"d4827cf0bc816147f6bb86edbc1a52c9a5b91ebc5faa02d7d9026e852088e28f1a0f296c4afe4af80a94e394e4b75837410c47bb887832a03f6a86bf2b53128e","ssdeep":"768:KN9yFcio+wKh9tXjcb4IbDB6IcP8nHfVlkbWVgnC1fAi0YAclqc/gIJg2bTco:IxQ9tTcb4eB0AfVlkbWVgnC1fAi02Dx","tlshash":"e44394d8691ac0d85d9620ede833e409e4a8091bcd6df163a63cddc1b41efa78487d7b","size":58819,"data":"","first_seen":"2026-02-18T11:47:00.249562Z","last_seen":"2026-06-26T23:42:12.186377Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/?claim.arbitrum.io","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"0e1ee9f442371606d9a13b41a0dbeaff","sha1":"a05c25c8ad9127fe7d45319ce13e8b4a485d2e01","sha256":"713285cbc0cb910dfd2e7a86c604d191a27789ae50964ab1c674507ff4a20c45","sha512":"1dbac9fa1e0b338e780a3600f1a3da140a6c83a961a1d0c6c80fe3dc5a9041c346c471d264a07ccc87457cdccc2a28b768d02283512ba9cee0fc2e2b7124e42d","ssdeep":"","tlshash":"0221fedeb2826488526794d742cd8dceb8e617a919008c20452ef299225c3e8fb6ad54","size":1177,"data":"","first_seen":"2025-08-01T04:16:24.218288Z","last_seen":"2026-08-07T23:35:22.194346Z","times_seen":3339,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/?claim.arbitrum.io","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"a97d6ef5abced657bf5d46b969b239da","sha1":"212f1fc55f39b82d41e88c7628aec3b33d263afc","sha256":"fd3d3ea23ebc1d6ff9299cbe2cc651dfcd714b9be828c8ca2a81540e2f85eaf9","sha512":"6f35480a04c1360f72ae3d1dec34f1357b49fb10a7c7e6de8124e33a87b075127206686daa9145d40be27c4dd761f078d085a1f2538567c714ede67f66122c7c","ssdeep":"192:7mmQewTVPeY8DpuTM3kpVg9LuKXgnudSWXLPKPIlH4SjmnUYsCc0V02Y2pE2XuCh:7mmQewTYY8Fb3kjgTtLPKPIJgcx0V02l","tlshash":"8732c5b06a242ad911d604e20ace4f5d74f591611179dc249b3ef28a2fec3cab7d37a1","size":11308,"data":"","first_seen":"2025-08-01T04:17:54.885074Z","last_seen":"2026-08-07T23:31:54.15614Z","times_seen":1579,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c2091a992e4303600967e53388cb5c8","sha1":"70cb06404a117829d3c53f5890077f5ff82957c9","sha256":"52edf640b5358d2e388d34d85bae2bf9973c26383165c4187da4e98b7703233a","sha512":"4d379fa96658dead5908f119d36ff91db8ec34d145fad5888370bd681ec575615351eaa0336fba48e4ad102b84e07881286bb1a958ec15ac36f86677de149d15","ssdeep":"192:0CFny7CpmYbZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCTZTJr40v0GF/LvV4hwsR","tlshash":"9332a6b7e0a1107ea316871c106fa610f61f6c8ab2561da5ba7ab46f900ddcfc065f7c","size":10918,"data":"","first_seen":"2026-04-21T04:02:24.334927Z","last_seen":"2026-08-08T05:39:32.631693Z","times_seen":13900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/3d49f768-fbff-4074-8981-b427a3ef4153","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"15b4b3a96ba8e741c1c892a3347d7d19","sha1":"902a7262860450d0820309f854b58789e3f59f33","sha256":"ad40467ca34a655d5caa66dd0751bd18406309991f5145c9fe1449197a4d85eb","sha512":"11c2cf39fe169d28a4e161ac7d9c582fb152bbdfab0c2379df321785918b269584bcca86fb0cbf839ac87ba284aa50c2fbe39880799e881f46ea5b76ac76ca5e","ssdeep":"6144:SQVY1Rp057cq9vpsSGToSBQ7kZ0KfFj+hvlC67rftr90Fv+2LD:S47ooWMhvrkZLD","tlshash":"7ef4e8e19f1b503ccf9b1296117209a4e624a93e4acf900df09cb9445397ea7d9ce63f","size":773713,"data":"","first_seen":"2026-06-26T23:37:43.285459Z","last_seen":"2026-06-26T23:42:12.196182Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/3e10950a-91c3-49d7-8102-901d94819d8a","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"429ae913c73a181ebced0b00dc131a14","sha1":"8bacb9af4a36f8e546ce2c2569c125b832d01ea3","sha256":"0cdad0c11e06b08511f03ace271aed786b6dd141f23314d830249cc2f5e16e37","sha512":"cadd4ab63b90c595c43139264073c8c7b6668ef57ddd53ff1936c8b9b7e18dd0daa142faeaef20e6b7c4068beb065fbe25675004f67d5a46a38d7f1cab748528","ssdeep":"49152:GGkwdNZngkO5QcwW2QUSvhjG+EyY4bfO3xrQanJfCpszVtyuY:c","tlshash":"53f523926d5bb8f58f54439570ab2d0f18940d22585df1eae7a4f5c33caef9080ef928","size":3394529,"data":"","first_seen":"2026-06-26T23:37:43.282783Z","last_seen":"2026-06-26T23:42:12.199596Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2fecc9d90ae6ad7f85d676e274e5d4a5","sha1":"0e1300fb36969ed28db617c9bba0c8d0bff72c8e","sha256":"db389f4bb5872ace6ade114d9a15d1afc02e7d411680f6f98fa5a350b0b4ee5c","sha512":"e5fe2e55710dccb04046bf588c1cdfd27a153447b5a8f818af6e4f536abc89f4e38f242c117a4a6f2214a017653008272075811e9a40a5718a08b3900ecd71a0","ssdeep":"6144:jzicBg7MOpWK+1ZWwehNo4TR+5Ar6k+WS:nicBgoO27WwKvC","tlshash":"39744cc8f193b0b946e2a2a5009f5207737b052968e88494f574dfe968e8d5c637bf3c","size":348923,"data":"","first_seen":"2026-05-25T09:57:47.440233Z","last_seen":"2026-08-08T05:39:32.638884Z","times_seen":9656,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"060b43a60a7d242e48343a55959ccb86","sha1":"25646ea6d9ea3f884f53625fa06e3502bbd1902e","sha256":"8421f7d546464c427ae9eac17266e905eb13826114b0c391389393015180a892","sha512":"96f586d283a2a1b80ddd2e6b84447ea669924fd5d9f2b135cf0cd1a3f9cd8a854c9f60bcfa4d3dc18f18519ec92bdda00a981883da783f6b1367e0a35120dedf","ssdeep":"768:Vlxfu8+HYUmI+rT1Wf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK41:xfuro0f20UJWfO+Et7GZrC90k","tlshash":"3633d9cdb2d6f4258763632130af3006f27a4964a81dd155f334d8f6b9ece49a226f2d","size":54132,"data":"","first_seen":"2026-06-05T07:45:59.24269Z","last_seen":"2026-07-08T22:26:28.821022Z","times_seen":3596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-08T05:18:54.127309Z","times_seen":92969,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/124f142b-102b-4f10-a8ad-d58d66fa49dd","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4a9115ce54654b9d957bae131a12d4c7","sha1":"5993e123a8e96bb624384eb4f1a298450da9bc7f","sha256":"0d1220d221a432c931c772d3570f23d12f8a9c386923bd5f7b9f84cdeebede0a","sha512":"563c939b7f62dce579d3543667d2bc9530cd2a4a9b18c20bde51553fab2be17c3060be10d291bdf8b558bca152813107c79b93a75b29c1bb5e163638154b4170","ssdeep":"6144:vkWGpw3PDyy3hEcZQCw6BSn5NGCkx5h07Cw6wBmCZ7zUkhaIqF3oIEzFXDU476rR:cBwnhLZQCwkSnv1kx07Cw6wBmCZ7zUku","tlshash":"3574cfdd96d6b7bff3ee3283942b0b0573ed505bf216210d4a4afaa4302f654a0db458","size":358540,"data":"","first_seen":"2025-08-05T21:15:33.992845Z","last_seen":"2026-06-26T23:42:12.202089Z","times_seen":62,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/js/jquery.min.js","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","size":89501,"data":"","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-08T04:59:45.207046Z","times_seen":496875,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/?claim.arbitrum.io","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"Function","is_inline":false,"md5":"f278e1582a6b32d6a9a05328bba73b0f","sha1":"02780b645a044990e49787663d3dba06626b1e3d","sha256":"07317dc90130ec69ed8e07a8362168074f9067473354101f361449cff37110aa","sha512":"08463b63ba1654bf203117d8f0c0a2ce4b5d92914ffba7c8ac3d942ff1a812c86cc61d9e840e5f3422c2b22d1b71b1a06b9a6d40d4e4259b32fd8cd40cc8357f","ssdeep":"","tlshash":"55319948a43216904242e8f1c676abeeabe774080574446d349cbec7eff8447e521678","size":1529,"data":"","first_seen":"2025-08-01T04:16:24.221852Z","last_seen":"2026-08-07T23:31:54.168819Z","times_seen":3446,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"728033c1f201eab9c546c8b7955c8298","sha1":"6a5c69b5d1a7a2550b29e3a88e01b1acbac90c0a","sha256":"428b2d5ccec5dfdced9daac04cb4b68d5800161c5bf3e09ec3fd2f83b0cafac4","sha512":"00c74a70c31b95a17af5d4883b558908cd67853dc7edacc310101819dd497cb5c950ff20156023dfbe19b2ce37835b079e17f978cbd006c6523f3ae1510371a4","ssdeep":"","tlshash":"454183d936e8f9b6434318e1043f9016f6352976097be8c0531dd4f5bc78849815afb6","size":2306,"data":"","first_seen":"2026-06-24T02:52:14.943826Z","last_seen":"2026-07-02T05:16:55.616722Z","times_seen":1132,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9cf39b03023a75737727bafd1472574a","sha1":"85981f7c24c810044e7e18405ef0c97b2f29c877","sha256":"aa8a79c7c9c9b893b51cee07b0c2ec9326cc110d380abc0d303f29687b4f782f","sha512":"c66fdfd3fa116004ee589b10fc9d2772bd40cec168f4b847487b7d48a7a18c60e2861aaa8c332bcecdab7aa802dac4138e83f010ae5fb602f75e4ddaca672118","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kC7GN//h6LiJq:SzP2DVSLi8","tlshash":"be822ca6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","size":18392,"data":"","first_seen":"2026-06-24T03:40:21.619336Z","last_seen":"2026-07-02T05:16:55.601138Z","times_seen":900,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.276Z","timestamp":1782517289276,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ushib.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\netag: W/\"728033c1f201eab9c546c8b7955c8298\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 268\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a1201021fb6d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2306,"size_decoded":1760,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"728033c1f201eab9c546c8b7955c8298","sha1":"6a5c69b5d1a7a2550b29e3a88e01b1acbac90c0a","sha256":"428b2d5ccec5dfdced9daac04cb4b68d5800161c5bf3e09ec3fd2f83b0cafac4","sha512":"00c74a70c31b95a17af5d4883b558908cd67853dc7edacc310101819dd497cb5c950ff20156023dfbe19b2ce37835b079e17f978cbd006c6523f3ae1510371a4","ssdeep":"","tlshash":"454183d936e8f9b6434318e1043f9016f6352976097be8c0531dd4f5bc78849815afb6","first_seen":"2026-06-24T02:52:14.943826Z","last_seen":"2026-07-02T05:16:55.616722Z","times_seen":1132,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=68469777501b8d1909142b40\u0026widgetId=1it9rvbbn\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.367Z","timestamp":1782517289367,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=68469777501b8d1909142b40\u0026widgetId=1it9rvbbn\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ushib.top/\r\nOrigin: https://ushib.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-j7qx\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-35-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 267\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\ncf-ray: a12010229b8e783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2140,"size_decoded":1635,"mime_type":"application/json","magic":"JSON text data","md5":"8a91ac03d64affb5a56183cbe5247187","sha1":"0c1081e7e6a1224a695d8f5ef37015e1aa2a6980","sha256":"19e711160e1b8fa7a08cfb4e7dd46ed7b15c7ffa1e9fdce6a10046f3c6a5fcd3","sha512":"95a36894304e46fe9d1173c6ef123ce267f826f9d2df1c4b4ff248693ca4b97ec8f765a61fbd638ba0a9a943f874f81cdd783208da6602dd6ea75f071de80ec5","ssdeep":"","tlshash":"1541f0254a12dc7c63c9835371de7727aa2dd466f2846e0de1a89d2ce3fb64d210271b","first_seen":"2026-02-12T21:03:44.433061Z","last_seen":"2026-06-26T23:42:12.139721Z","times_seen":29,"resource_available":false,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.377Z","timestamp":1782517289377,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ushib.top/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 193\r\nOrigin: https://ushib.top\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-28gb\r\naccess-control-allow-origin: https://ushib.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a1201023aa3d0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1023,"size_decoded":1424,"mime_type":"application/json","magic":"JSON text data","md5":"34b5756c4a8b4338d01ca6c25c3b5b81","sha1":"0dfdfd79f788c7ef4ead24c67dad4170af6a1b9e","sha256":"519a2927727f9067488819ac8a012cdca954339fcd8e8b90b05347e044a5875c","sha512":"49f8e6b3beba8d32e9ea4b5da821e82008e4c0e5805313930639d44de5dfe3d802ba6906ec4e72b1697511fe6730118f1771167391f4328bb0dda8d30a8d81bb","ssdeep":"","tlshash":"f3113211bd8d5f89922b23800c9e3c4d52ccba9362c45499d5ca9ca97eea3b90893977","first_seen":"2026-06-26T23:42:12.14245Z","last_seen":"2026-06-26T23:42:12.14245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/images/favicon.svg","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.591Z","timestamp":1782517289591,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/images/favicon.svg HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nCookie: TawkConnectionTime=1782517289574; twk_idm_key=-oYTtlwpYCsMCoGCSkV7Z\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cVi22UojMwaxLuj%2BYsjCT9rju1ic%2BiKedQYCpovjjh43NUEdi%2Bn%2BwnG5vuvzYfP9WCYKqNAQr3FWTCWuIxaRwWohxkvFPOWQaeqfgTbF5jW1yhQ3fVXrOkhzAXs%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=6,i=?0\r\nage: 267\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a15681b-91b\"\r\ncf-ray: a1201023fae51525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2331,"size_decoded":1933,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"6402120fd8435947c8b18327701f1612","sha1":"d7fdc769f65013daf22cbf171aa6576a38e419e2","sha256":"ee23ddfb480b71782a9d303d76a3aecfab96f942a88266d364d97a5344aae9ff","sha512":"a5a7b36e842ca7b0567121c064102eb5b756e9946692296a8d4c899ba9fd5313c1ae08621f96cad2eb925c401c4a84573fec70e94584c227483ac8df483da9f5","ssdeep":"","tlshash":"22413ec3e384a8d4d4a4a7f84a1e60282b1778e79d10c150aad62e33f8421bd4d9aed3","first_seen":"2024-12-23T21:37:25.920331Z","last_seen":"2026-06-26T23:42:12.145425Z","times_seen":93,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/images/banner-b.svg","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.024Z","timestamp":1782517289024,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/images/banner-b.svg HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=036jT47sh%2FgzA00xj%2F6QrZWBBPzN%2BaAurQVcLFoR5nTw1Ibka2fmMk7scm8L04KdbAOR4B%2FfmJE6h77PHfr0YhIM%2BwuUYAFG94HrLPalFfTrU%2BcofAV8JsoZW%2FU%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\nage: 268\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a15681b-f6a\"\r\ncf-ray: a12010206a411525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3946,"size_decoded":2613,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"89d6b1e83501cb43846349d327f7d708","sha1":"0dcf84efd92dd1d1851d288fecbd5145cc90da48","sha256":"3e8d81da9fd7556acf46d57c6999a7699426a4d62edd630e064de18914610418","sha512":"abcdffa187b53391034c2562176ed8229d35d14e224b8728bd7f4316421c61f42c4d492e04720431b04b5f544f46933d55b210258c62d2f3f71bb06aef4961b5","ssdeep":"","tlshash":"9e8144eab3a4c2f4c149fff0941206bf7b3b34b97b61d320a7e99a40d5414ad4c82c40","first_seen":"2024-12-23T21:37:25.891901Z","last_seen":"2026-06-26T23:42:12.146644Z","times_seen":17,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/fonts/BrittiSans-Medium.woff2","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.181Z","timestamp":1782517289181,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/fonts/BrittiSans-Medium.woff2 HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2mpnNrYnspspIxA5yYOuUyMtQoVI8YwByXjpD5kXey3D85LuNOwxTktKFVeJQDp0%2B0OCpRLFVZ6JvggN3EoHsQLQ0Yj%2FbzxBapuqkOg3jOLyg4T5YHOmCFp3AM8%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\netag: \"6a15681b-2208\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 268\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 8712\r\ncf-ray: a12010216a671525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8712,"size_decoded":9639,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8712, version 1.0","md5":"05032d99d77e7383adc269f0185b3e82","sha1":"5b3abfa226b21b09cef2d832c0d0fe61d786253d","sha256":"409204a313833b0e08f86d3c4d4d709d1977f4a427f4de4aa5333c62679d5583","sha512":"c3f9c83add782c2621ec25bba05816ec095442f2f9c54abc5bd6b9e7f8fd6e80e1ed0ceee0cc0244c6daa6b67e18300d12cb9eef2e6b5ab30c9e36ba9e1f6a9d","ssdeep":"192:ZBLS4CHEVZ3P17at0LmuxdxDY1rbA2y4wGc3GKRid01h:ZA4CkTW0LmcdxDY1vhLwGc3Z1h","tlshash":"f902ae27e00daa1cf01d2ba94f13afd685499af72ff2cba345128012f5d3a34031a26d","first_seen":"2024-12-23T21:37:25.914294Z","last_seen":"2026-06-26T23:42:12.147834Z","times_seen":100,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.269Z","timestamp":1782517289269,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ushib.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\netag: W/\"d12d15160f2605cf70660e7166c6b2d3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 267\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a1201021fb6b783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":241359,"size_decoded":68736,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"d12d15160f2605cf70660e7166c6b2d3","sha1":"814c1aef9862e912b99376a5c766978b903144be","sha256":"2d90899a293947e63e242b0bbb91c4a971428bf09de4cb7abc48bd9147b1fdf6","sha512":"7a419016b85449813fa23f80a7cf776dbba51f2d5798f4eeafb2a2b363479d26f9c4147ac612e9a5f84b495712ab29b2deaff4d098a0f6ede948b46912ffa0d5","ssdeep":"3072:tiEIYgAYqhzhTodyWFW1WfifM4AOMMxzjQi4IzxLMz9YZ15:t6yWFW1WKfM4AAxvZLMz9615","tlshash":"5a34c69df186b47606a37130501f320af23a685ab45ac4d4f636d8e1bd789cea133f79","first_seen":"2026-06-24T02:52:14.792867Z","last_seen":"2026-07-02T05:16:55.618666Z","times_seen":1132,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-2d0da3af.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.922Z","timestamp":1782517289922,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/js/twk-chunk-2d0da3af.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\netag: W/\"e03e2e8123414a9b75d420e2eada7fc9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 248321\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a12010260a490b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":14213,"size_decoded":5489,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (14213), with no line terminators","md5":"e03e2e8123414a9b75d420e2eada7fc9","sha1":"43192f3233e07d96140f95880261f027bc0b13e6","sha256":"34f98e3742d4fb8141269e79a7ba8e245a078c4cc8123477c769aaa7be865176","sha512":"3f6cb179bdab1cba09adfb8ec9aefb213992678c18b8acac01cb4021fe7684cc56fdd472f805061b6acba33e6f555bd6ccce6cc407b5d2be29d28054113a1f78","ssdeep":"384:UJw/U5YK8Hx9KJcThWazJbUZDkM0kWEYPk6F+UtKM5eH:6+9KJcThWazJbUZDkM0kWEYPk6F+92eH","tlshash":"c652c6a7b2a4782d42379712708f3205f33b7d45b215da19f36edcea4aa84c16056f3e","first_seen":"2026-06-24T03:40:21.647965Z","last_seen":"2026-07-02T05:16:55.645623Z","times_seen":816,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/css/min-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.961Z","timestamp":1782517289961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/css/min-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 02:38:19 GMT\r\netag: W/\"af9830eef563b4df395870a483ce549c\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 248320\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a12010264a4f0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36092,"size_decoded":8711,"mime_type":"text/css","magic":"ASCII text, with very long lines (36049)","md5":"af9830eef563b4df395870a483ce549c","sha1":"2c678a245c7b8984569447c9bbfe182583ef7e56","sha256":"5d919993a3fe6ec4c27ec6696b643900c02b95584a4a21a518eb8809edf12531","sha512":"16416617f0c79b40d196c1a7df699f1e01a130e3df75a4f437b4adfc04fa666ac7987d080bbfe759b849bd81860e6bab5b2af02356a8814f0dd1fa9a64b726d4","ssdeep":"384:uTTacuVZNgxYe4fbgL3w23U3xi7vxEbXR+ziLwH0Lg26/tFTiBB6TX3DYC8:yeyna+ziLwH0Lg261F2BBCX3DZ8","tlshash":"47f2bef1f4b700c8b363c122c3d5f67c6459b770ca86ce92f427666c49e16a63581abc","first_seen":"2025-05-21T12:18:34.219676Z","last_seen":"2026-08-08T05:18:54.102101Z","times_seen":49445,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/css/branding-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.979Z","timestamp":1782517289979,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/css/branding-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 02:38:19 GMT\r\netag: W/\"fe979c92a5ad992510e5629b84a23526\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 248128\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a12010266a520b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":19329,"size_decoded":4800,"mime_type":"text/css","magic":"ASCII text, with very long lines (19281)","md5":"fe979c92a5ad992510e5629b84a23526","sha1":"4fee6cd9de53fa82feef4042aa83202f4cd194a5","sha256":"de84306c96c98314e1a796f26df99a70f20590c535a678215d89560007b4dacf","sha512":"633913cef35247da29e85dde7c279353761606e6c508690d4d5924aa89f563354e44c51b053f785800fd3b599feb8fd2d69a2fe55162b4ccab95c84f8ed8739d","ssdeep":"192:XeI2u2acuBLZNgxYe4fbfYLFFDw25lYVRgtUramxi71NZcFRKV7:uTTacuVZNgxYe4fbgL3w23U3xi7vD1","tlshash":"af92dca3b9e310dcd557c632c0d1f67ca82f9a24c357c6e3a9037bb986827d7264198c","first_seen":"2025-05-21T12:18:34.239407Z","last_seen":"2026-08-08T05:18:54.100354Z","times_seen":38867,"resource_available":false,"data":null}},"time_used":11,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/css/fonts.css","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:28.783Z","timestamp":1782517288783,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/css/fonts.css HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:28 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\netag: W/\"6a15681b-b22\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 268\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mj2JbugyCidwrHosHfkGGozSmguSOmGH%2F%2BV0EfV6WjZmuGJJyxISaGimA6KHiOaf%2BeZa1eq%2FK4xzJDTPmr3xtPmcjSqhFlKT8hQrvs6wc%2FInpP08D46jNGjQUaE%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a120101eea131525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2850,"size_decoded":1652,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"0c56dae6070082a738970b241f097d5f","sha1":"990a93446bea8f60f92b7dc1ce405269784c4977","sha256":"47f7069ebd3d30cce2a5dd7c7494dc285a3cdf4520efba8e42aadc45daeea469","sha512":"00fa931509b9947de130186896a64a28f5f51f907f2b2fbb94aedad4dd9f0d5ae91d3274b6446bbdeca2073bbb79e85b8d5531f3b7fa3d6d1a30aa42b1368db4","ssdeep":"","tlshash":"2a516980081b2114f6730c8a63de7f21da8d6057a280923a7bfd3a965ffb9751264b4e","first_seen":"2024-12-23T21:37:25.877463Z","last_seen":"2026-06-26T23:42:12.156461Z","times_seen":14,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/js/main.js","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:28.792Z","timestamp":1782517288792,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/js/main.js HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:28 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\netag: W/\"6a15681b-117a\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 268\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EPe1tbksAM5Lh3dX121ffd35iyIUmc8k3dzNv3AjeokTpOSCPBXzHJJrRO1fQNiF71OTQ81aYF%2BUUbflULWa%2F5Mcnmn1dTXRISqtlfyNt%2BbUsED04mUzGdlBk7Q%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a120101efa1a1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4474,"size_decoded":2769,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (4473), with no line terminators","md5":"fd4bf0f38b597733cfda4058e1fee957","sha1":"952243d74ceba05b2c6b4977c82475b229d7d136","sha256":"81fc0b3965dc29b202721a77efe3f4c319c6c58b6c8ebd3516ce890013d3f9e4","sha512":"3e5f68b7d78d55ae9d3e4e50ef7299ccf32d26458692079c4737c440d743a9d0acb449ef6d43ad434e153fc34df2ea3595bc71332737eaac35c22b760179aa11","ssdeep":"96:/2SPlSOG9BK3i9UCH24axF/CtNTMmbt6yKVpgDr2Wgxta/6:/27OBi9UY24axF/Ct1MS6yKVGDr2txtV","tlshash":"309125062fd02bc9534922ed3b2bb468e331e994c1c1518ec89d7d649bd1f38daf9538","first_seen":"2024-12-23T21:37:25.885088Z","last_seen":"2026-06-26T23:42:12.157483Z","times_seen":10,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/images/banner-a.svg","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.022Z","timestamp":1782517289022,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/images/banner-a.svg HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jKSz%2FX7BS6sQRTpSAPsYnMwXGtDmz3ArvNY%2F6KJJ0%2B%2B5uRjmg0zKztUd1Uv37p%2Bkx7heH5Xb3NWdnWVkE9aaz730RTf1njLEm403VgxnMKOCHiPTpRjvWs%2Fkxrw%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\nage: 268\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a15681b-10d5\"\r\ncf-ray: a12010206a401525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4309,"size_decoded":2837,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca95ddbfaea67c236bc2766e90e401dd","sha1":"7ce716c10eaa4a977ccb88bfbd12bd7d4d00c851","sha256":"ad35e3c0670b85de607fafcdb89a25cbb39db821a57b8009f18d94afae9c580a","sha512":"ce0a1d596aa8a8394c813fcf2c90dd6afdc1cc43be989e57bd2c1a85389b051e391518927b1a8c86db590d5c85fb6b96ea281f54063ef392c5280ab1f69de8f6","ssdeep":"96:u73gDhuRM6VNfd/xnjV2LtvfuVcqkRDoOrFQEKikK:u73IhuRMaNPjVuxwCRDVR","tlshash":"e19167e9578dd5f1ee05f7f95126a079736320febfaac628c7466d98390141dcd418c0","first_seen":"2024-11-30T11:50:18.30089Z","last_seen":"2026-06-26T23:42:12.158707Z","times_seen":18,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/favicon.ico","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.210Z","timestamp":1782517289210,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: text/html\r\nlast-modified: Tue, 26 May 2026 09:30:02 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=6,i=?0\r\nage: 257\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3AmtYpy3JRuiLzoTJqk3yzg2xvFEakbjfofRQ5JCwse0lKR08Fvrywigt%2BpLtknwd%2FkAlevUlMRt2FJ0vGjlhrNNmUnw2OChF6SDP7BjcFDuPc3NncPxhToDmrQ%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a12010219a691525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7579,"size_decoded":3311,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (460)","md5":"39bc4ea4fe0aa10ae3a4a1380ef14496","sha1":"6aa521695f8a87a780ae0eb99de9c1c61b3a766b","sha256":"ea9da0ec9471fc7668ff3345719d8a5da6342d41fc96b592c7bffb0ec82ffbc7","sha512":"4418fdd0b6d96d79015673f77c9f768734c61ccf2fb978b54ccb7f76a7752dae3b74ee8a03d1b87b93ff05eee830efeea367df3349989fd5889773b151e9bc32","ssdeep":"192:ljHjDjuHaEjb6aw6/VyjoWe+QYXSZqewF:WaEjl/F+QYXSZqeu","tlshash":"8af17372b1f50276016381e136a5eb6e79e0c617cbff4494b7ddc6631f9ee81a903290","first_seen":"2025-12-29T12:26:41.837779Z","last_seen":"2026-07-11T03:37:03.852092Z","times_seen":74,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.264Z","timestamp":1782517289264,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ushib.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 268\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a1201021eb65783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":656,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-08-08T05:18:54.106432Z","times_seen":92939,"resource_available":true,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.378Z","timestamp":1782517289378,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ushib.top/\r\nOrigin: https://ushib.top\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 \r\nx-served-by: visitor-application-preemptive-09sw\r\naccess-control-allow-origin: https://ushib.top\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\npriority: u=4,i=?0\r\ncontent-encoding: br\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a12010229b94783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":707,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T05:24:27.754443Z","times_seen":17773657,"resource_available":true,"data":null}},"time_used":155,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/css/message-preview.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.990Z","timestamp":1782517289990,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/css/message-preview.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 02:38:19 GMT\r\netag: W/\"39f38fff97bceb6dd38d255228384ab9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 248320\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a12010267a530b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54016,"size_decoded":12896,"mime_type":"text/css","magic":"ASCII text, with very long lines (53968)","md5":"39f38fff97bceb6dd38d255228384ab9","sha1":"4f9d5ac34f834ec7f160fe555097691b45d47d39","sha256":"d9b57cfbaea5a38c3d279ba0a64a2fa0ccb499f94dfac8dc8845ac1c0f22f829","sha512":"cf1a36ed2530d962ee9a8013cfa3585dad4e85857e225c6a5670c92a574769d771b6a0f1ff2ae31c176ca078e7f747b704746996fe7dcbf826d906754e5545ed","ssdeep":"1536:fGUifm7kUdwddCriQiLc0Lg261F2BBCsEZf:J1V","tlshash":"cc3322b2f56710ccb363c22292d1f6bc202ae770d746ce96f427766c4ad12a63551fac","first_seen":"2026-01-16T00:46:03.995467Z","last_seen":"2026-08-08T05:18:54.122088Z","times_seen":33798,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/?claim.arbitrum.io","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-26T23:41:28.490Z","timestamp":1782517288490,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/?claim.arbitrum.io HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:28 GMT\r\ncontent-type: text/html\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\nvary: accept-encoding\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\npriority: u=0,i\r\nage: 268\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=m9V6xW%2FJaE06mtxtTTdy2Xd6gywO0774SvS6oJcKxF3%2FBZo7UFL57qwWUru5L1R58wXfzrXTVM4umku5d39udrIHvN%2BflPirIwhSmNIztG3ZI9TmWyNDo4dugXA%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a120101d39cd1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":15315,"size_decoded":4006,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text","md5":"27226c94bc38f888f0469b2899dcd5fa","sha1":"b9331e54b4ff19eb664e6d58b5dd02740d62440e","sha256":"68d2a8682d814ee247e4d1973f0f4470248f6ae0f18cfc9d3af51094ea6da96e","sha512":"0887ea68c38471e1b1bc1d04247bce08001173b032b7cc69d25802c7b07f73694db6537ecb5a5a1dbd598df3ab696ef5c2f1757ca19b3f63b261adc559c3bbfa","ssdeep":"96:TL5iqLSfiw/me6tTTsojYIuetidbAEUxXKVngtUBCwVy0o7/d7FWZ:UPifeQTYAYIuS+bArVKVKUwwVuFFy","tlshash":"8e62746054f110375282a2916a225f6bbfc0ea07de5ba32136ed4bd45fc7e86ce6724c","first_seen":"2026-05-23T13:11:24.743065Z","last_seen":"2026-06-26T23:42:12.164181Z","times_seen":3,"resource_available":true,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":3,"connect":19,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/css/style.css","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:28.785Z","timestamp":1782517288785,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/css/style.css HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:28 GMT\r\ncontent-type: text/css\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\netag: W/\"6a15681b-97ee\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 268\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BK5ApOtCu832Ewzzhylunok65uYr2mDCj6fkC8KptU1Ip%2BpsfCgyehA%2FvgNt76LsGNyR5dH7s8SjhH%2Bm5eoW6DnlytRc1O1lYLY5sd43LtqEluYA7H8JqUktjpc%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncf-ray: a120101eea141525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38894,"size_decoded":8900,"mime_type":"text/css","magic":"ASCII text, with very long lines (3603)","md5":"5f7603ee6c25330cdb2460d71b8035a1","sha1":"d308e850f1c1eac1e356d51889e4e7ac5e283d9d","sha256":"64f010aca403c1d9494864d1c7da559b9bb32bfcc38ced13f471135732db9a8d","sha512":"2ebff4361d4dc08b411c71d6ccae81ba14237e38e122313f9e9a9495f06f655060ebd75293d17818d3b61cca0f41b54f36b631abd0d024a26ef5cb3bd48374d6","ssdeep":"384:nP8ziUQVwi3N+lgTtDR2RO2RESWb+UdKtwN/d157Y:P8zIDa9eNu","tlshash":"df0351ab5293164078078d541fae1711237cc027950afaf83ecf6a988f8b5c9c9d27de","first_seen":"2024-12-23T21:37:25.879428Z","last_seen":"2026-06-26T23:42:12.165084Z","times_seen":10,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/images/banner-c.svg","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.025Z","timestamp":1782517289025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/images/banner-c.svg HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AoVpPYjoubdjofjK0VUeQ%2FhV6pfynir2SLJXGPbrLrt1bt7IT97AkTL3n8P1ETEOUWMtlMgAnh%2FxKvUmB39i33ln0YEDLL5DcW6sA9pGCIr6y%2B%2BJvzL4b%2BRH47s%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\nage: 268\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a15681b-202b\"\r\ncf-ray: a12010206a421525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8235,"size_decoded":4538,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5e4c6d98ce2bf8a94ef5b8a0e9a5edd5","sha1":"0c572350aa6deddf65ee78e2646c8f08159365c2","sha256":"7c819b651871b054c5d2a6ad5a5c2e686133ab1e8b8fd93d2cc4edfbb94e1cc7","sha512":"ed36a19d5e9425919d979b36cc3cab1c2a6a92367648a34361548ece7b8fb8a25ea132488f7286c08cfc9388fca3320e2ce5aafda8c4ab5373393399593423aa","ssdeep":"96:Gqa2b24514NXlPeXBXnLypuYbRoUceZKnC4Qol2EeyPyMV7D16mxAzheSJ6/3kGA:GqXS9eRCRcaylPHVv4maNeSJ+kR","tlshash":"3102c9dca7d927f0f90ae7f49f1594f03a5720baaf92c36483d45d5896264ac85ccdc0","first_seen":"2024-12-23T21:37:25.894063Z","last_seen":"2026-06-26T23:42:12.16607Z","times_seen":17,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/images/banner-f.svg","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.028Z","timestamp":1782517289028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/images/banner-f.svg HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1WH%2BQ07BXIysUtRn%2FhFYpu2AMlxsu%2Bj52E26%2FvkLjsRykyP9AJDkZS6%2BUHA49NVIbcypmk4J%2F%2F9gsP%2F16tZwSbj10aY018pKy%2BxJc6oFKSQA1IG0eJirO%2BZ1w5s%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\nage: 268\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a15681b-ded\"\r\ncf-ray: a12010206a451525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3565,"size_decoded":2487,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"75634d5fcc42602e72e4ab3015624fc7","sha1":"73b31963482c8e5cc3182b8007bb8e8ec6358edf","sha256":"0fa538b4cf59ff9111bfc25cfabf5f4bb5e72ab8580927dfc3a7a87a3d578190","sha512":"3bb1156dccbb31066700eb6aef8fa9940f01e3f6302e92093cd3153f6c1677f7672687830d2fd7dfb288a08577c40bfe1a90d9337e0c165d3b3bc028852807c1","ssdeep":"","tlshash":"bd71b6feb768f2f09402f7e6ef791474751f2cf92ea583b0c3a54d549a2649d8814d80","first_seen":"2024-11-30T11:50:18.316525Z","last_seen":"2026-06-26T23:42:12.166915Z","times_seen":19,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/fonts/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.151Z","timestamp":1782517289151,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/fonts/UcC73FwrK3iLTeHuS_fvQtMwCp50KnMa1ZL7.woff2 HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/css/fonts.css\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: font/woff2\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z77r2L2hzgjqkTrHEfmOrP0vGbOu7UVKI3%2FnyIQmhmMWELJTwvuzwZhNs%2FocjVEuUoeJHQzoao%2FGQ7MlpP1ztMho%2FYg4ri%2FuZOn7S70EmfWGPizHJ8dpd7Hy7LY%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\netag: \"6a15681b-b670\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 268\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-length: 46704\r\ncf-ray: a12010213a5f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":46704,"size_decoded":47638,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 46704, version 1.0","md5":"30a274cd01b6eeb0b082c918b0697f1e","sha1":"393311bde26b99a4ad935fa55bad1dce7994388b","sha256":"88df0b5a7bc397dbc13a26bb8b3742cc62cd1c9b0dded57da7832416d6f52f42","sha512":"c02c5894dfb5fbf47db7e9eda5e0843c02e667b32e6c6844262dd5ded92dd95cc72830a336450781167bd21fbfad35d8e74943c2817baac1e4ca34eaad317777","ssdeep":"768:f3Ybit5PQRS0FhgC1g10ijolF5rm2GsRnENYMSGAxgvZdH3VayjX2p2iKEmcLf:fIbi7eHBmt0F5rm2GsRENqGAx0Zdlt2r","tlshash":"1223f100917181a2eea73b3e82c96adb00ed51db6dc0e564a22f16f99d1f23f4385d5b","first_seen":"2023-09-15T13:47:10Z","last_seen":"2026-08-07T14:26:35.445747Z","times_seen":20237,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.266Z","timestamp":1782517289266,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ushib.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 267\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a1201021eb67783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":32878,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-08-08T05:18:54.131432Z","times_seen":66440,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.373Z","timestamp":1782517289373,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ushib.top/\r\nOrigin: https://ushib.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\netag: W/\"17fa2497bdae7324a17eaedfe6fc8650\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 267\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a12010229b8f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11596,"size_decoded":4375,"mime_type":"application/json","magic":"JSON text data","md5":"17fa2497bdae7324a17eaedfe6fc8650","sha1":"27bce6a96d49d0077bc16228801a3089fce5be2a","sha256":"cce37a30801a132937edb0ac257f4ed917559c00d6a648716bd9ac406cfc62b1","sha512":"f4155fcb97d0180daa46cb293cd70f01b984c39f9895f76a0acc098b0c5f86f883378620e75f8fb79b0e0b1e5033e4ace16046bc48ca2a9c2127053ae48be305","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9KvKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59t3Zwfi","tlshash":"98323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2026-05-13T09:28:21.606546Z","last_seen":"2026-08-08T05:39:32.640779Z","times_seen":11056,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.375Z","timestamp":1782517289375,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ushib.top/\r\nOrigin: https://ushib.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/json\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 267\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a12010229b91783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10839,"size_decoded":4368,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-08-08T05:18:54.132225Z","times_seen":28773,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-2d224aff.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.918Z","timestamp":1782517289918,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/js/twk-chunk-2d224aff.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\netag: W/\"9cf39b03023a75737727bafd1472574a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 248321\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a12010260a470b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":18392,"size_decoded":5825,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (18392), with no line terminators","md5":"9cf39b03023a75737727bafd1472574a","sha1":"85981f7c24c810044e7e18405ef0c97b2f29c877","sha256":"aa8a79c7c9c9b893b51cee07b0c2ec9326cc110d380abc0d303f29687b4f782f","sha512":"c66fdfd3fa116004ee589b10fc9d2772bd40cec168f4b847487b7d48a7a18c60e2861aaa8c332bcecdab7aa802dac4138e83f010ae5fb602f75e4ddaca672118","ssdeep":"384:jqiSR0nIa0kIrCQl2kL3kC7GN//h6LiJq:SzP2DVSLi8","tlshash":"be822ca6f149311bc925c750605f2228b33b19a9fa1ece7df2745cf245a8cc2906af3d","first_seen":"2026-06-24T03:40:21.619336Z","last_seen":"2026-07-02T05:16:55.601138Z","times_seen":900,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-3ea2c7ce.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.919Z","timestamp":1782517289919,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/js/twk-chunk-3ea2c7ce.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\netag: W/\"52698c6dc96b5f2bd13e8f921334e398\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 248321\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a12010260a480b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5504,"size_decoded":2976,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (5496), with no line terminators","md5":"52698c6dc96b5f2bd13e8f921334e398","sha1":"eb0adbc44ebc73775c5cca0a3851e8a6510d360c","sha256":"37527b07ac54a4567d7e23bde1edfde8ed74c4f30402c96fb56f4c0020c6af42","sha512":"032e41ececcfc651f34c235d15953baacb81e7cfaf492dd919c7fca2a7c49d507ae4a60710064c5419df70eb581254058dffbf1d0d4c53ef47d87bce4e036524","ssdeep":"96:60WlCWYW5rugkENQdx0hZUASzpqrcHZ73abT3Qlgjm6i5cCEsK7oGuyGwDf/2/5N:XBTW5qgNQdAR7c573abF8cCEsK72/5N","tlshash":"b5b11982b251b4668ab5380045cf6f07b07baf4f5d09cd50d783e4a3b230c5a9667e8c","first_seen":"2025-11-13T12:40:48.559139Z","last_seen":"2026-08-08T05:18:54.128197Z","times_seen":42030,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-4fe9d5dd.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.927Z","timestamp":1782517289927,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/js/twk-chunk-4fe9d5dd.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\netag: W/\"8249fafc9a9fbe0f75d4bef0aae2305a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 248321\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a12010261a4a0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1000,"size_decoded":1081,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1000), with no line terminators","md5":"8249fafc9a9fbe0f75d4bef0aae2305a","sha1":"fab6dda0967dfbaf8ba0cfe5cfade8e150d1735d","sha256":"69b650b4d6479fd29987836a9b74147aade85cc9c50024bcacd5dfb2cb793e8d","sha512":"d0bc9a750061e5b4b761db081656b0e1e655126a413aaa22e87ce14cdfaeac34d532acd08eb0d61274707212871f6d84369b8b2a1a6d3e6c3bfd3d4167afa865","ssdeep":"","tlshash":"f9110248f056b8fcdc8af64288df143034627d4a898cf9e6f5f0aad405555ab312bb5f","first_seen":"2025-04-29T08:39:38.372752Z","last_seen":"2026-08-08T05:18:54.129088Z","times_seen":49630,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-7941cc06.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.931Z","timestamp":1782517289931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/js/twk-chunk-7941cc06.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\netag: W/\"060b43a60a7d242e48343a55959ccb86\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 248321\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a12010261a4b0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54132,"size_decoded":14772,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (54013)","md5":"060b43a60a7d242e48343a55959ccb86","sha1":"25646ea6d9ea3f884f53625fa06e3502bbd1902e","sha256":"8421f7d546464c427ae9eac17266e905eb13826114b0c391389393015180a892","sha512":"96f586d283a2a1b80ddd2e6b84447ea669924fd5d9f2b135cf0cd1a3f9cd8a854c9f60bcfa4d3dc18f18519ec92bdda00a981883da783f6b1367e0a35120dedf","ssdeep":"768:Vlxfu8+HYUmI+rT1Wf2z+y+Um/+VRJWf/W+Hc1lt7Gj67IW8/JGvgLCBxf6stK41:xfuro0f20UJWfO+Et7GZrC90k","tlshash":"3633d9cdb2d6f4258763632130af3006f27a4964a81dd155f334d8f6b9ece49a226f2d","first_seen":"2026-06-05T07:45:59.24269Z","last_seen":"2026-07-08T22:26:28.821022Z","times_seen":3596,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-6289ff8e.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.933Z","timestamp":1782517289933,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/js/twk-chunk-6289ff8e.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\netag: W/\"c529786800a1b7e92a493a07bb8f11a6\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 248321\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a12010261a4c0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106684,"size_decoded":27414,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"c529786800a1b7e92a493a07bb8f11a6","sha1":"2b7cd1b06bd155ee698d95fd0e06f269ba37709e","sha256":"80c50c48d8ebe37367af574d48fdac278f7bf3bac97dabd5f977ed693b53a58f","sha512":"39e1b570a4fda9b8452ea58d01049b1e2a7a366c2ade583ba9369fda2306dd3ecf994a727394fc917b23cce5d54f3c4e51acb468c35c6911f0d007a631fe30ba","ssdeep":"1536:BigMXSFu196wofTn32jlDlgaOA9WbaGlDluK14VYrdZPkx3u4V5pfYMrlSf:4DiuTg+Glmfx3u4V5pPrlSf","tlshash":"f6a31a6ef091b47d8993d26120af3212f3363d55a919d0a8f234cdf859d89c9a127f3e","first_seen":"2026-06-24T03:40:21.679494Z","last_seen":"2026-07-02T05:16:55.666316Z","times_seen":887,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-2d0c8092.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.934Z","timestamp":1782517289934,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/js/twk-chunk-2d0c8092.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\netag: W/\"96ef13965221ca05025839273ae465da\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 248321\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a12010261a4d0b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5261,"size_decoded":2633,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5261), with no line terminators","md5":"96ef13965221ca05025839273ae465da","sha1":"6241fa7d32f0ec4bbf6e4f19ee9de157c0a19f80","sha256":"0d4bddd3c2a0340eaba00d621f4e6c8484b1c4ca78f56976c1dea0b59720a21d","sha512":"8a1b2e7be0128eed522e85ab752bda824ae9077d5939d5bef272da7a417087c56c85b1ede37df4e251c3745e5fd66275923949ea2cc889cabdb056783b0e1f1b","ssdeep":"96:zNC9Hqt7pEma7hY/rcKqJBPDRIv6hJQ7i16p3n4vkjvxQcsD:zKHhNYILRIvgx43nVY","tlshash":"fcb1859ef247b456c156225150ef3b1df33a281ca61ccdc4b66565f218784cba077b39","first_seen":"2026-06-24T03:40:21.597078Z","last_seen":"2026-07-02T05:16:55.594124Z","times_seen":898,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/css/max-widget.css","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:30.026Z","timestamp":1782517290026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/css/max-widget.css HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:30 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 02:38:19 GMT\r\netag: W/\"85532263e48314d325edb683c1706ab3\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 248320\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=2,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a1201026aa610b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101900,"size_decoded":22861,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"85532263e48314d325edb683c1706ab3","sha1":"f7aecd422e7305caa4435a8a5a8de7a53161338e","sha256":"a725287ad5dcfdd2073f286c3c044a50d4075a9cb6a3e45520902cfcff6154ed","sha512":"cea6b3f7ffc2dd57775e676a4bc0b0c426f6fbffa06311b5364993aa0e2cee0dd4d9d1d66b7350ff514a458586bd9e9a75e259fc340971379ddd99cfb6f34133","ssdeep":"1536:f/Uifm7kUdwddCri1iLc0Lg261F2BBC4ikauV3cGiH27PNWE98MGfU0nPROpmi0f:xfuVLmi0V0o+tKaK","tlshash":"eea398b2e56710cc7363c22692c1faac1029e370c757caa9f827767d4bc25963562f9c","first_seen":"2026-06-11T08:47:13.099686Z","last_seen":"2026-07-02T05:16:55.672884Z","times_seen":1983,"resource_available":false,"data":null}},"time_used":9,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":9,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/images/logo.svg","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.020Z","timestamp":1782517289020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/images/logo.svg HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rc9%2FaT7vCrPkgzLxh%2Bn6RrU3ro8zzIM1ys2CW3vh9MkoefWqmcxt2l2hPCz3VwY3A04kwJUMAmOeZPTU%2F6G2Z48ZhqK0vCoOWjf2lopNqGHMlJOhdVcC%2FCJmw0k%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\nage: 268\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a15681b-266c\"\r\ncf-ray: a12010206a3f1525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9836,"size_decoded":4524,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"075a816d5a40d9d7b7a43c8100d78314","sha1":"02143fdf464b5ce914e840be0a45152982a791bd","sha256":"467e80233c085d89bbe9411653f157daf377ea316f08eb761e7ba1e38e265f28","sha512":"815b7751e643bf496c0f6575d2eacff367336c62db39802ddaeaabf98cf4c1624e30c37815b76458148b8f6fbee59cdeb11d55ca9ffbc5edbfae95dc8577fe3a","ssdeep":"192:ZzjRONG6IXVCyMCePZ/CoY0RH7d+2esFWDjwe9D1M4jC:ZHPVCylePZ/TRRH7dxXFWDjV9D1M4W","tlshash":"6112b6ddebf5d2e1e904b3e4abd3502d3b1264f7a796cab5c3862e65e91104cc489cc2","first_seen":"2024-12-23T21:37:25.887822Z","last_seen":"2026-06-26T23:42:12.175876Z","times_seen":96,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"eoe1u9eng3oo7bi.m.pipedream.net/","fqdn":"eoe1u9eng3oo7bi.m.pipedream.net","domain":"pipedream.net","tld":"net"},"ip":{"addr":"18.205.101.32","port":443,"asn":14618,"as":"AMAZON-AES","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.057Z","timestamp":1782517289057,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"*.m.pipedream.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Thu, 25 Dec 2025 00:00:00 GMT","end":"Sat, 23 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"35:B2:9B:25:AC:60:01:78:F1:ED:BC:8D:C9:1E:78:39:5F:6D:C1:6B","sha256":"3A:0D:9F:17:7F:58:78:0C:FD:A2:3B:EF:2F:72:E8:8C:98:2D:74:A4:D1:49:22:DE:54:03:39:1E:1C:D8:11:06"}}},"request":{"raw":"OPTIONS / HTTP/1.1\r\nHost: eoe1u9eng3oo7bi.m.pipedream.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://ushib.top/\r\nOrigin: https://ushib.top\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/2 204 \r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,HEAD,PUT,PATCH,POST,DELETE\r\nvary: Access-Control-Request-Headers\r\naccess-control-allow-headers: content-type\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":248,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T05:24:27.754443Z","times_seen":17773657,"resource_available":true,"data":null}},"time_used":465,"timings":{"blocked":-1,"dns":0,"connect":92,"send":0,"wait":94,"receive":0,"ssl":278},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/images/claim-bg.jpg","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.174Z","timestamp":1782517289174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/images/claim-bg.jpg HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AFO%2BtNHGO4m3D9gNHYQtFStOHvFDgCeDwRgaotaT%2B5lCMfZwyZ2CMldgRRBuGMq%2BsZEvxaY1otpDbwRnufBxR8w4pTub5rbJKTDAXM%2FC4whvuK2ncclmOk3cKeA%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\netag: \"6a15681b-6098\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 268\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-length: 24728\r\ncf-ray: a12010215a651525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24728,"size_decoded":25657,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 594x241, components 3","md5":"0fac6161ee92e1866ab091b7eea03e54","sha1":"636042fc8eb0fb89d0c09c393848a21ba2972b6e","sha256":"2d8fd666437bb4cbb3db1537c9ceedf9c0f9e114a084c366cb3233bc6af37c83","sha512":"710aaab78572a4622d5708dee788a600dd5d95e89390b2705bcc88e9c6ea09f848299cd91445deba004257ec7d791756f7e320a2587a28a9f2783b90a08bcd77","ssdeep":"768:QRyIeHHOfW6ru/7I9Cdfqw8pl1T4xHnTETDADD:QRyLHOfZHtsBjD","tlshash":"a7b2d5baf28bc3950b03364c8efd7d7353898ad248e5b15f599b2c42e658f6294130bd","first_seen":"2024-12-23T21:37:25.90675Z","last_seen":"2026-06-26T23:42:12.176553Z","times_seen":9,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":7,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-2d0d2b7c.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.916Z","timestamp":1782517289916,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/js/twk-chunk-2d0d2b7c.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\netag: W/\"8c2091a992e4303600967e53388cb5c8\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 248321\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a1201025fa460b69-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10918,"size_decoded":3755,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (10918), with no line terminators","md5":"8c2091a992e4303600967e53388cb5c8","sha1":"70cb06404a117829d3c53f5890077f5ff82957c9","sha256":"52edf640b5358d2e388d34d85bae2bf9973c26383165c4187da4e98b7703233a","sha512":"4d379fa96658dead5908f119d36ff91db8ec34d145fad5888370bd681ec575615351eaa0336fba48e4ad102b84e07881286bb1a958ec15ac36f86677de149d15","ssdeep":"192:0CFny7CpmYbZTxcwr40v0zSrj5D6/L6LvGokD36b4hwseQ:08mCTZTJr40v0GF/LvV4hwsR","tlshash":"9332a6b7e0a1107ea316871c106fa610f61f6c8ab2561da5ba7ab46f900ddcfc065f7c","first_seen":"2026-04-21T04:02:24.334927Z","last_seen":"2026-08-08T05:39:32.631693Z","times_seen":13900,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"wss","addr":"wss://vsb26.tawk.to/s/?k=6a3f0e29ff0792a665f4f9b7\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2ODQ2OTc3NzUwMWI4ZDE5MDkxNDJiNDAiLCJ2aWQiOiI2ODQ2OTc3NzUwMWI4ZDE5MDkxNDJiNDAtZFA2c0hwZnEyeExLMG0xcWpDenhKIiwic2lkIjoiNmEzZjBlMjlmZjA3OTJhNjY1ZjRmOWI3IiwiaWF0IjoxNzgyNTE3Mjg5LCJleHAiOjE3ODI1MTkwODksImp0aSI6ImI0bWRrN2ZwSTR6SF9fMl9Ta3A3TSJ9.NfcQ08qntls7glqegHCgOpUMcqPQU7LdqNZQGG_gUNFxTDjGePxl9PDcbKPn7_75hYW8LJS91k8MrZyWYfuR2w\u0026EIO=3\u0026transport=websocket\u0026__t=Py6JrE_","fqdn":"vsb26.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"websocket","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.948Z","timestamp":1782517289948,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /s/?k=6a3f0e29ff0792a665f4f9b7\u0026cver=0\u0026pop=false\u0026asver=0\u0026tkn=eyJhbGciOiJFUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6InZpc2l0b3ItYXBwbGljYXRpb24tc2VydmVyLTIwMjEwMjIifQ.eyJwaWQiOiI2ODQ2OTc3NzUwMWI4ZDE5MDkxNDJiNDAiLCJ2aWQiOiI2ODQ2OTc3NzUwMWI4ZDE5MDkxNDJiNDAtZFA2c0hwZnEyeExLMG0xcWpDenhKIiwic2lkIjoiNmEzZjBlMjlmZjA3OTJhNjY1ZjRmOWI3IiwiaWF0IjoxNzgyNTE3Mjg5LCJleHAiOjE3ODI1MTkwODksImp0aSI6ImI0bWRrN2ZwSTR6SF9fMl9Ta3A3TSJ9.NfcQ08qntls7glqegHCgOpUMcqPQU7LdqNZQGG_gUNFxTDjGePxl9PDcbKPn7_75hYW8LJS91k8MrZyWYfuR2w\u0026EIO=3\u0026transport=websocket\u0026__t=Py6JrE_ HTTP/1.1\r\nHost: vsb26.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-WebSocket-Version: 13\r\nOrigin: https://ushib.top\r\nSec-WebSocket-Extensions: permessage-deflate\r\nSec-WebSocket-Key: Qvc+AR7iR80Ea6CAyygyGg==\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: Upgrade\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: websocket\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nUpgrade: websocket\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 101 Switching Protocols\r\nDate: Fri, 26 Jun 2026 23:41:30 GMT\r\nConnection: upgrade\r\nUpgrade: websocket\r\nSec-WebSocket-Accept: mwFvWHtdelhQ4nhRw8Y2VAJ/6zI=\r\nSec-WebSocket-Extensions: permessage-deflate\r\nStrict-Transport-Security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nX-Content-Type-Options: nosniff\r\nServer: cloudflare\r\nCF-RAY: a120102659f0c759-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"101","status_text":"Switching Protocols","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":417,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-08T05:24:27.754443Z","times_seen":17773657,"resource_available":true,"data":null}},"time_used":651,"timings":{"blocked":-1,"dns":16,"connect":14,"send":0,"wait":614,"receive":0,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/68469777501b8d1909142b40/1it9rvbbn","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.016Z","timestamp":1782517289016,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /68469777501b8d1909142b40/1it9rvbbn HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ushib.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccess-control-allow-origin: *\r\ncontent-type: application/x-javascript\r\npriority: u=3,i=?0\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-6a3b42ed302\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 268\r\ncf-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: a12010207b1d783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2123,"size_decoded":1226,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"3f651b78676ac7b48a56af76d17cd536","sha1":"f985032a9f938e93149b808b7c58ecddc6ea9021","sha256":"88a6a8ed351829a0891db3704e9cdb3d908ad9791bd6634432cf5228bbdd6b1e","sha512":"9cc2ab6ca517bf1e065ca63e6a8b9447fc48f3bdbf4926245b235e99514259a913af2923ffdcf78e395f7e5297434a0c943dcc08570e0b3b1041a7807a1be0d7","ssdeep":"","tlshash":"894154d79f0f1d52a32420d94caefd0f78b371f646d869924b48102276b17ad2acde38","first_seen":"2026-06-26T23:37:43.229623Z","last_seen":"2026-06-26T23:42:12.177865Z","times_seen":2,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":3,"connect":13,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/images/banner-d.svg","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.026Z","timestamp":1782517289026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/images/banner-d.svg HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hAwaZPAPcqrhA5FI4uq%2FPl7SJxHH5Ulh%2F0SRdXIN7nhijjmRODi3NMDIDhJDaHfd1ScEqyi9yBFwHpCgAQh5D0KxnFtckbez4xO%2FPzWDrHuHu%2Fy5yh7AAPdKjcQ%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\nage: 268\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a15681b-1828\"\r\ncf-ray: a12010206a431525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6184,"size_decoded":3257,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"688379963d858baa742de0edda6e36ea","sha1":"b4b1b66c0ab9894f5af521fcdec0e338d5409b06","sha256":"04de6c943086ca423e5cafee888472492e2c9a0eefab67df3120246cfaf7820e","sha512":"12dee8e81614e16f43a784994fec778d51574842414d330a6e93484ca0a0332af484b8e7a7801041fa0df7cd90d8d8c9777c5fcd30b1419e013626e98e9516db","ssdeep":"96:kEOcjxI99RyFHmGgwiBi9iZd+mJ3RRUrmvERlidTvQQbfh9CDm1:3AU9mGgwiB4eYmJBum8RlidTtCDm","tlshash":"48d176de666895e0bc06bbfcaa3b28d038172db76f47d60582f42c06a5664dd1879dc0","first_seen":"2024-11-30T11:50:18.306867Z","last_seen":"2026-06-26T23:42:12.178951Z","times_seen":19,"resource_available":false,"data":null}},"time_used":7,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/images/banner-e.svg","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.027Z","timestamp":1782517289027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/images/banner-e.svg HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: image/svg+xml\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AS0lqan7DOzj6mplxAzREFwFmYaaQlrZwVcN8QGeje51l23dx4jjvnHew%2FhjXQnbm0WXp0GVxIqUIKvcGQEySJ1aNb%2FEZLK2EqyI5blp85KKj6idnVNgGQvVGdw%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\npriority: u=5,i\r\nage: 268\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\netag: W/\"6a15681b-e1a\"\r\ncf-ray: a12010206a441525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3610,"size_decoded":2391,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"1f4112763e98f76c3c5e7c53d66d685c","sha1":"202a0176319944594dc49792c66c8114490190e1","sha256":"d4e0bbe7deaba8b5d2a2d0d736b4a211c32274ddacbff6aa9c1ac170abafb428","sha512":"081a899047d9401792779a26f698f1e7da7685a061dbc3110380c1049d935b4ceb73e222c20429c831116067df8acba2cb7a20ae69d1b32bcf71877ef39d490b","ssdeep":"","tlshash":"1d71d6ca738cd1f0a506f3d4db352478e7afa8f9df666a384b845e2bb84149d8c448c1","first_seen":"2024-11-30T11:50:18.313499Z","last_seen":"2026-06-26T23:42:12.179761Z","times_seen":18,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/images/bg.jpg","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.154Z","timestamp":1782517289154,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/images/bg.jpg HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: image/jpeg\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4e1M1FZnTIQt5gZZtieQ7oF4Nbvxkuw6iylgnCOdPYS7g8rvhYrY478jQ2pIaxHBXLda24zTsdZK13%2BKgO3%2B6xAXE0OOeXSsnvy7yRD12KkQ%2FY7yz8ie2peXvGQ%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\netag: \"6a15681b-1627e\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 268\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-length: 90750\r\ncf-ray: a12010213a601525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":90750,"size_decoded":91678,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 1920x1080, components 3","md5":"e3a5d4c98f9168026ba97cee270a5030","sha1":"66d7ba77c0128a1ec76306dc846b3a2a3ea2b4c1","sha256":"855dbd1b729327496ed03738d1ecedf1f08f0eba45fddba7a425df0d17860926","sha512":"87e0d4bba9f2bbca87e3ab937c018c1d0957e78ecdd8388c48555b446d37b12835349c940f2a94bcfcebdc22fd4783f95f891539f98c92e87d8773bdfd423688","ssdeep":"768:0vc8VekFkDHHnAC1WCXG1mtPr2NezTsQG5cTNizefJU8lHA71YF:0vc8f+DnnoCXri35cTkzqJU8l41YF","tlshash":"fd939c75ffc7d76453236a6e953ebd37178542c826c80e0b89434e28d020fb58a672bd","first_seen":"2024-12-23T21:37:25.902631Z","last_seen":"2026-06-26T23:42:12.181056Z","times_seen":16,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/images/clock.png","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.157Z","timestamp":1782517289157,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/images/clock.png HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=w8P674rOPFr2W9iziGQKFDNhJ3kZ30btyqkpfUMBvK8pAmaet9ROcvJLcnBYSSTJ3dmzpb5drAhCzG9ejNDFR1g88J4PwpiGNGaa9Gkerk4RlLdkuUEsERbRAiQ%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\netag: \"6a15681b-653\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 268\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-length: 1619\r\ncf-ray: a12010213a611525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1619,"size_decoded":2537,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"a769e38d03fc88505e22d655cc6d4a52","sha1":"be484f2dc1f9836567d5d3fdadb7baabe043e47f","sha256":"12790c3a358d5c5557123bbeee5b60942c9d1026a7cb548b98b65265f9998525","sha512":"80c3a42b41ae81fa81dc1c14cec830411d4248897d67cee8078c48f2085bce43b450980e9ce1e596b14bb4b4dba8da43f41b9b15ec640fcf0df7abff3a59475b","ssdeep":"","tlshash":"ff31eabd26e49febf94dceb13394b2806dba02b733cdc9931a683013e3166554150448","first_seen":"2024-12-23T21:37:25.904786Z","last_seen":"2026-06-26T23:42:12.182132Z","times_seen":50,"resource_available":false,"data":null}},"time_used":8,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/images/welcome-image.png","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.166Z","timestamp":1782517289166,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/images/welcome-image.png HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/css/style.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: image/png\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=74IdeSllQ2vWKgs9aU8uPxfCnoPLidXwv6%2F5QXxlELvpdypbIWx5yZS%2Byz9koOcm6LVGVadh6qOz6WRETejCorvcAE9mmscJeKfZUQvYxFK8IeR1404TPmoEH2Q%3D\"}]}\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\netag: \"6a15681b-324c8\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\naccept-ranges: bytes\r\nage: 268\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-length: 206024\r\ncf-ray: a12010214a641525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":206024,"size_decoded":206950,"mime_type":"image/png","magic":"PNG image data, 2810 x 306, 8-bit/color RGBA, non-interlaced","md5":"8a9f44bd2869a9933a29e8d97eb67f7b","sha1":"9d3998847e14635808e6a67c1f92d891e71010c4","sha256":"a8a6587300d667f1a7f997848e1d7d37b2e573a2c098264000c5cf2f53e162e1","sha512":"2f90feb3fbea8232fe32161c4d74f9fbc41c15920dd8388e75a363cb2b216f934bbdfdff5164c4f8f5790a3121eac242074f7b19a47bda83a57af1a33234988e","ssdeep":"3072:zRducESzSkWSiiCKUqY+22dsDYdghvM6S4y1sexaNKA24zWULXUyPM0Q2OZX:Huvk/zUqbdsMdgVE4Is2GZW+XUy0v2OV","tlshash":"5d14120474b1e513fe5364b44204ff8f7983b8aaaef5bbb0c1a5a65fb1b0c8585853d8","first_seen":"2024-12-23T21:37:25.908891Z","last_seen":"2026-06-26T23:42:12.18327Z","times_seen":9,"resource_available":false,"data":null}},"time_used":12,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.277Z","timestamp":1782517289277,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ushib.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 268\r\npriority: u=3,i=?0\r\ncf-cache-status: HIT\r\ncontent-encoding: br\r\ncf-ray: a1201021fb6f783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":151,"size_decoded":680,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-08-08T05:18:54.127309Z","times_seen":92969,"resource_available":true,"data":null}},"time_used":8,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/secureproxy?e=jscdn/getFile","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.305Z","timestamp":1782517289305,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"POST /secureproxy?e=jscdn/getFile HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nContent-Type: application/json\r\nContent-Length: 37\r\nOrigin: https://ushib.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncast-mode: default\r\ncontent-security-policy: frame-ancestors http: https:, frame-ancestors http: https:\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET,PUT,POST,DELETE,PATCH,OPTIONS\r\naccess-control-allow-headers: Content-Type, Authorization, Content-Length, X-Requested-With, Accept, Origin\r\naccess-control-allow-credentials: true\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nvary: Accept-Encoding, origin, access-control-request-method, access-control-request-headers\r\nx-content-type-options: nosniff, nosniff\r\nx-xss-protection: 1; mode=block, 1; mode=block\r\nreferrer-policy: strict-origin-when-cross-origin\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F4zQUFDozKZyfjxOCov4J8jli56NtWodVLF54VlG29rc6UYBmTutLkvLKp7JA0%2B7010O%2Bb0S7BNiuQ9Wj6Z0LV1%2BToLzWAnO%2BsYn97Mk1zu3jgetGjcxvr1kH%2F9YmuQS%2FAr4%2Fio%3D\"}]}\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\npriority: u=4,i=?0\r\ncf-ray: a12010222a891525-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3394529,"size_decoded":2616979,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"d7ba7a0dd4766b0cbd471d6f65b63378","sha1":"09d5f899409ea4b767fff907d75191790f402d5c","sha256":"f83c2857b8a6dcb9cd1d9b9cae7cbc439ad35d9479694096ba28cab3bf64c1cc","sha512":"1f07165d37b6549e1a93972ea0903fbaec6d86ae71c5f34255c3c707f582e292a120212d4ea680702642ae67ba6b3007178b2ee51bdcb1134a00a8fd0a755cd0","ssdeep":"24576:Ib/YWmLkwsOukzMSPbg+lsVo5/Cr0OSzcfUjel7M0R986gW6R:GGkwdNZngkO5QR","tlshash":"3a2523f35f6b882c8b6c1e9d607b2d0f3d804c115409ebf6f9e6e487299977011aad78","first_seen":"2026-06-26T23:37:43.268573Z","last_seen":"2026-06-26T23:42:12.185353Z","times_seen":2,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":230,"receive":342,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/0x.js","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:28.782Z","timestamp":1782517288782,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/0x.js HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:28 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\netag: W/\"6a15681b-e5c3\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 268\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Q4uhZRjR7lZSjJLlThrvjIwvfGfqzYRiievwvyaxxEis8iKAH1q%2BqU%2ByDiRDJcHav445ZwmIkSuOTh2KmUDkHDKEB1ph7em%2FX56mHfrbV%2BFRF3pI8ZE7qEdIlto%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a120101eea121525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":58819,"size_decoded":19109,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (58819), with no line terminators","md5":"7d4acd04b840bc06246022c4aedeb33c","sha1":"c47c07af75ef1b63be422071799113cb7d484544","sha256":"66688abfe36b64a65debbbd0403af3020052d4c66318a58cb5b025149bac7de0","sha512":"d4827cf0bc816147f6bb86edbc1a52c9a5b91ebc5faa02d7d9026e852088e28f1a0f296c4afe4af80a94e394e4b75837410c47bb887832a03f6a86bf2b53128e","ssdeep":"768:KN9yFcio+wKh9tXjcb4IbDB6IcP8nHfVlkbWVgnC1fAi0YAclqc/gIJg2bTco:IxQ9tTcb4eB0AfVlkbWVgnC1fAi02Dx","tlshash":"e44394d8691ac0d85d9620ede833e409e4a8091bcd6df163a63cddc1b41efa78487d7b","first_seen":"2026-02-18T11:47:00.249562Z","last_seen":"2026-06-26T23:42:12.186377Z","times_seen":28,"resource_available":true,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ushib.top/ARB/js/jquery.min.js","fqdn":"ushib.top","domain":"ushib.top","tld":"top"},"ip":{"addr":"104.21.49.245","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:28.790Z","timestamp":1782517288790,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ushib.top","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Tue, 26 May 2026 08:36:05 GMT","end":"Mon, 24 Aug 2026 08:36:04 GMT"},"fingerprint":{"sha1":"B0:A2:BC:04:D9:2B:5C:A6:0D:85:34:3D:0C:2E:49:7E:FA:14:C9:04","sha256":"98:B9:0F:3B:03:E2:65:77:58:48:44:C8:FD:CF:C6:76:2B:4B:42:E4:21:31:41:BC:E0:82:7E:D2:A8:60:EB:D0"}}},"request":{"raw":"GET /ARB/js/jquery.min.js HTTP/1.1\r\nHost: ushib.top\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/ARB/?claim.arbitrum.io\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:28 GMT\r\ncontent-type: application/javascript\r\ncast-mode: default\r\nlast-modified: Tue, 26 May 2026 09:30:03 GMT\r\netag: W/\"6a15681b-15d9d\"\r\nstrict-transport-security: max-age=63072000; includeSubDomains; preload\r\ncontent-security-policy: frame-ancestors http: https:\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\nx-cast-cache: MISS\r\ncontent-encoding: gzip\r\nage: 268\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JudLySwbPQdV0pALjYDgQ6OT1jkWLNXK9Z3JzLQOUyPYB%2BNK6zbACE7M2TZzw1jIyIIjV8%2FzHuZOn8IvZm897y3iu%2BNSrkY84Luc7gazjShaHrV5ELxCh1YjMk4%3D\"}]}\r\ncache-control: max-age=2592000\r\ncf-cache-status: HIT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncf-ray: a120101efa171525-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89501,"size_decoded":35725,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"8fb8fee4fcc3cc86ff6c724154c49c42","sha1":"b82d238d4e31fdf618bae8ac11a6c812c03dd0d4","sha256":"ff1523fb7389539c84c65aba19260648793bb4f5e29329d2ee8804bc37a3fe6e","sha512":"f3de1813a4160f9239f4781938645e1589b876759cd50b7936dbd849a35c38ffaed53f6a61dbdd8a1cf43cf4a28aa9fffbfddeec9a3811a1bb4ee6df58652b31","ssdeep":"1536:DjExXUqJnxDjoXEZxkMV4QYSt0zvDL6gP3h8cApwEIOzVTB/UjPazMdLiX4mQ1v9:DIh8GgP3hujzwbhd3XvSiDQ47GKn","tlshash":"069309ddb2c6702257a720ba007f510bf236199d6c4d8450f169d8eabc78a4e827bf7d","first_seen":"2023-03-07T01:02:13Z","last_seen":"2026-08-08T04:59:45.207046Z","times_seen":496875,"resource_available":true,"data":null}},"time_used":9,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-26","alert":"Sinkholed","trigger":"ushib.top","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/6a3b42ed302/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ushib.top/ARB/?claim.arbitrum.io","date":"2026-06-26T23:41:29.268Z","timestamp":1782517289268,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 04 May 2026 11:24:07 GMT","end":"Sun, 02 Aug 2026 12:24:06 GMT"},"fingerprint":{"sha1":"5D:D6:F5:FD:F8:CB:78:44:A8:2A:49:EF:03:C0:C8:B5:0C:1B:79:99","sha256":"65:9D:D6:CF:E0:10:86:0F:22:8C:9E:D6:AD:88:47:05:8D:FB:5F:4A:85:E4:06:8F:C1:BC:1D:F0:CA:87:D0:5A"}}},"request":{"raw":"GET /_s/v4/app/6a3b42ed302/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://ushib.top\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://ushib.top/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Fri, 26 Jun 2026 23:41:29 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 24 Jun 2026 02:38:20 GMT\r\netag: W/\"2fecc9d90ae6ad7f85d676e274e5d4a5\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nage: 267\r\nvary: accept-encoding\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: a1201021eb69783d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":348923,"size_decoded":117194,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"2fecc9d90ae6ad7f85d676e274e5d4a5","sha1":"0e1300fb36969ed28db617c9bba0c8d0bff72c8e","sha256":"db389f4bb5872ace6ade114d9a15d1afc02e7d411680f6f98fa5a350b0b4ee5c","sha512":"e5fe2e55710dccb04046bf588c1cdfd27a153447b5a8f818af6e4f536abc89f4e38f242c117a4a6f2214a017653008272075811e9a40a5718a08b3900ecd71a0","ssdeep":"6144:jzicBg7MOpWK+1ZWwehNo4TR+5Ar6k+WS:nicBgoO27WwKvC","tlshash":"39744cc8f193b0b946e2a2a5009f5207737b052968e88494f574dfe968e8d5c637bf3c","first_seen":"2026-05-25T09:57:47.440233Z","last_seen":"2026-08-08T05:39:32.638884Z","times_seen":9656,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}